Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: m/zJ03OXMsvtHyn+DiLVNL2kjIWyk4VqC+ghWvE0BA4=
Subject key identifier: 23:DF:39:8D:53:66:90:56:0B:FB:97:1D:57:24:BC:D8:9A:AC:C0:42
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 01A0DD29225D933BCBA9916038C8E8707BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1A7C
Signing time: Sat 26 Sep 2026 10:00:55 +0000
Manifest this update: Sat 26 Sep 2026 10:00:55 +0000
Manifest next update: Sun 27 Sep 2026 10:00:55 +0000
Files and hashes: 1: H_EahYix-W19mql9n-PQwFFmZ30.roa (hash: 17ddLBS1IPaDyhHagz+Emm7kfAhJ3BI92bEt/QsilrI=)
2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: jdj09a8rw8v+FSSah+Aiq5cY5VoqzGRf6kDSpNJbV1E=)
4: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
5: yhSXUlVamR-zZ5m_SN46dT0IkMI.roa (hash: MIQXE7BooxPG7h5Z2Qw2PG5T0/LuMdp6jCasMFaOQ7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:22:5d:93:3b:cb:a9:91:60:38:c8:e8:70:7b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Sep 26 10:00:55 2026 GMT
Not After : Sep 27 10:00:55 2026 GMT
Subject: CN=23df398d536690560bfb971d5724bcd89aacc042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:0a:c5:7e:59:09:a5:d7:65:ee:35:e5:c6:
39:05:34:5a:df:97:72:28:db:37:e9:c4:f5:08:05:
7f:46:d9:cb:d6:af:70:65:61:ad:79:65:de:72:a9:
b5:7c:51:c4:d7:be:a4:27:7d:2e:43:9f:53:2e:e7:
b5:72:e1:4b:5e:6f:44:50:7a:a8:f7:02:a2:86:3a:
70:66:67:e3:81:10:d5:86:36:c6:48:e9:08:91:76:
70:fb:03:20:ff:b3:e8:8b:d6:04:8a:5e:ea:45:e4:
7c:4b:03:eb:d3:e8:fb:3d:69:b4:fc:87:df:c9:3b:
62:1c:4d:0e:64:67:58:3c:44:73:8f:6a:ea:d5:ca:
a4:1d:cd:f6:eb:3d:26:20:ad:8d:a0:2e:7b:95:5e:
af:ac:1f:54:61:b8:eb:9d:31:2f:c0:fd:5c:d9:54:
9d:40:65:99:e3:cb:61:42:7c:d1:9d:c6:24:37:1d:
16:49:79:10:e4:6a:2d:40:8f:ed:73:d4:e4:9c:04:
4e:82:48:a4:b1:19:40:39:f4:f3:3e:fa:3f:dd:e0:
b9:15:96:60:19:f6:64:1e:ef:3d:c0:e1:5b:0a:c8:
74:b9:1d:ba:8c:e7:3f:9d:69:04:58:dc:86:e1:7a:
12:71:33:df:86:88:68:3a:cf:44:c4:b0:23:cc:ae:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:39:8D:53:66:90:56:0B:FB:97:1D:57:24:BC:D8:9A:AC:C0:42
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:00:33:51:42:06:6f:76:8d:1b:d9:40:53:d6:9a:46:dd:
71:30:fa:e1:88:0e:e6:69:f9:7f:23:86:2a:c2:c4:9c:4b:05:
eb:cb:2a:e1:72:66:50:7f:3d:c7:41:87:08:03:82:de:30:f2:
ec:80:80:c6:3c:1c:b5:02:6e:07:b6:3b:c0:f9:a7:84:00:fd:
dd:bb:bc:4c:ea:e6:26:a1:e5:7f:b4:45:a3:1e:2e:33:d6:f3:
c6:88:0d:84:23:70:6e:10:f4:8e:54:a9:2f:e7:3b:c6:77:13:
db:f0:86:83:e3:fc:fc:2b:23:b2:f8:15:df:61:e7:2a:5b:66:
cf:a0:e0:95:70:f3:11:dc:1a:71:95:76:2e:f6:05:29:25:d4:
73:f3:d4:69:9f:c6:e9:67:3e:bb:7a:a7:e8:8c:f3:f3:91:50:
45:e1:aa:6f:58:23:ed:25:e0:f5:36:40:d7:19:74:6c:5c:a8:
ea:aa:e4:a2:68:62:da:92:af:a0:ec:c6:e5:fe:91:80:ea:57:
aa:0a:d3:be:bc:53:6b:9a:be:9a:bd:be:a5:53:43:8c:7a:a5:
f6:49:52:67:09:98:3c:9c:05:b6:62:5b:76:87:3d:d6:48:4e:
05:f9:c8:6f:95:84:aa:95:71:bf:3c:0b:2f:d2:70:fb:56:94:
11:f3:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:39:25 2026 by rpki-client